Summary

Sub-menu:/user

MikroTik RouterOS router user facility manage the users connecting the router from the local console, via serial terminal, telnet, SSH or Winbox. The users are authenticated using either local database or designated RADIUS server.

Each user is assigned to a user group, which denotes the rights of this user. A group policy is a combination of individual policy items.

In case the user authentication is performed using RADIUS, the RADIUS Client should be previously configured.

User Groups

Sub-menu:/user group

The router user groups provide a convenient way to assign different permissions and access rights to different user classes.

Please note, that even the "read" group includes sensitive, reboot and other important polcies, meaning that this group should not be given to untrusted users. For true limited groups, make a custom group, defining specific policies. All groups have access to file operations.

Exclamation sign '!' just before policy item name means NOT.

Example

To add reboot group that is allowed to reboot the router locally or using telnet, as well as read the router's configuration, enter the following command: